Peter works at the company Midwest Insurance. His manager, Linda, asks him to send the terms and conditions for a life insurance policy to Rachel, a client. Who determines the value of the information in the insurance terms and conditions document?

• A.The recipient, Rachel
• B.The person who drafted the insurance terms and conditions
• C.The manager, Linda
• D.The sender, Peter

Comment: *

Name: *

Email: *

Verification: *

ISO 27002 provides guidance in the following area

• A.Framework for an overall security andcompliance program
• B.PCI environment scoping
• C.Information handling recommendations
• D.Detailed lists of required policies and procedures

Comment: *

Name: *

Email: *

Verification: *

What does the Information Security Policy describe?

• A.which Information Security-procedures are selected
• B.how the InfoSec-objectives will be reached
• C.which InfoSec-controls have been selected and taken
• D.what the implementation-planning of the information security management system is

Comment: *

Name: *

Email: *

Verification: *

Of the following, which is the best organization or set of organizations to contribute to compliance?

• A.IT only
• B.IT and legal
• C.IT,business management, HR and legal
• D.IT and management

Comment: *

Name: *

Email: *

Verification: *

Which of the following measures is a preventive measure?

• A.Classifying a risk as acceptable because the cost of addressing the threat is higher than the value of the information at risk
• B.Putting sensitive information in a safe
• C.Installing a logging system that enables changes in a system to be recognized
• D.Shutting down all internet traffic after a hacker has gained access to thecompany systems

Comment: *

Name: *

Email: *

Verification: *